CVE-2005-3523 : Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to

Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir (direction) field.

Published 2005-11-07 02:02:00

Updated 2018-10-19 15:36:51

Source Debian GNU/Linux

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2005-3523

Gpsdrive » Gpsdrive
Versions up to, including, (<=) 2.09
cpe:2.3:a:gpsdrive:gpsdrive:*:*:*:*:*:*:*:*
Matching versions
Gpsdrive » Gpsdrive
Versions up to, including, (<=) 2.10pre2
cpe:2.3:a:gpsdrive:gpsdrive:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

52.78%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Jump to